blind SQLIpy sebuah alat injeksi sql yang menggunakan waktu sql untuk mendapatkan sebuah server database.

Related tags

Deep Learningpythondatabasesql-injectionexploitationtakeovertime-based-blind-sql-injectionblind-sqlipy
Overview

blind SQLIpy

Alat blind SQLIpy ini merupakan alat injeksi sql yang menggunakan metode time based blind sql injection metode tersebut membutuhkan waktu yang lama agar bisa mendapatkan sebuah server database. Alat yang saya bangun ini menggunakan bantuan sebuah library seperti library blinder dan requests untuk bisa mendapatkan server database tersebut dan bahasa pemrograman python.

Yang Bisa Di Lakukan blind SQLIpy

  1. Cek Injeksi URL Sasaran
  2. Dapatkan Nama Database Sasaran
  3. Dapatkan Nama Tabel Sasaran
  4. Dapatkan Jumlah Tabel Sasaran
  5. Dork Injeksi SQL

Di Uji Pada :

  • Windows
  • Kali Linux

Penginstallan Pada Windows Dan Kali Linux

git clone https://github.com/galihap76/blind-SQLIpy.git

Kamu cukup clone dan simpan pada direktori mana pun.

Penggunaan Pada Windows

C:\Users\GalihAp76>cd blind-SQLIpy
C:\Users\GalihAp76\blind-SQLIpy>sqli.py

Penggunaan Pada Kali Linux

cd blind-SQLIpy
python3 sqli.py

Penyerangan blind SQLIpy

 _     _ _           _   ____   ___  _     ___
| |__ | (_)_ __   __| | / ___| / _ \| |   |_ _|_ __  _   _
| '_ \| | | '_ \ / _` | \___ \| | | | |    | || '_ \| | | |
| |_) | | | | | | (_| |  ___) | |_| | |___ | || |_) | |_| |
|_.__/|_|_|_| |_|\__,_| |____/ \__\_\_____|___| .__/ \__, |
                                              |_|    |___/


 [>] Di Koding Oleh : Galih Anggoro Prasetya
 [>] Github         : https://github.com/galihap76




===================================
[+]         blind SQLIpy        [+]
===================================
 [1] CEK INJEKSI URL SASARAN
 [2] DAPATKAN NAMA DATABASE SASARAN
 [3] DAPATKAN NAMA TABEL SASARAN
 [4] DAPATKAN JUMLAH TABEL SASARAN
 [5] DORK INJEKSI SQL
 [6] INFO DAN CONTOH PENYERANGAN
 [7] KELUAR

===================================


[+] pilih nomor yang kamu mau : 2
[+] masukkan URL sasaran pada blind SQLIpy : http://testphp.vulnweb.com/product.php?pic=1
[!] harap tunggu...
[+] nama database pada sasaran :  acuart


[+] pilih nomor yang kamu mau :

Penyerangan blind SQLIpy pada nomor 2 untuk mendapatkan nama database sasaran.

Pemberitahuan Dari Saya

Jika kamu menggunakan alat saya ini harap bersabar dan menunggu untuk mendapatkan server database sasaran karena ini menggunakan metode time based blind sql injection jadi ini juga membutuhkan koneksi internet.

Owner
Galih Anggoro Prasetya
Pemrogram Komputer
Galih Anggoro Prasetya
GitHub Repository
VGGFace2-HQ - A high resolution face dataset for face editing purpose

The first open source high resolution dataset for face swapping!!! A high resolution version of VGGFace2 for academic face editing purpose

Naiyuan Liu 232 Dec 29, 2022
The 1st Place Solution of the Facebook AI Image Similarity Challenge (ISC21) : Descriptor Track.

ISC21-Descriptor-Track-1st The 1st Place Solution of the Facebook AI Image Similarity Challenge (ISC21) : Descriptor Track. You can check our solution

lyakaap 75 Jan 08, 2023
Code release for "Self-Tuning for Data-Efficient Deep Learning" (ICML 2021)

Self-Tuning for Data-Efficient Deep Learning This repository contains the implementation code for paper: Self-Tuning for Data-Efficient Deep Learning

THUML @ Tsinghua University 101 Dec 11, 2022
In this project, two programs can help you take full agvantage of time on the model training with a remote server

In this project, two programs can help you take full agvantage of time on the model training with a remote server, which can push notification to your phone about the information during model trainin

GrayLee 8 Dec 27, 2022
The fundamental package for scientific computing with Python.

NumPy is the fundamental package needed for scientific computing with Python. Website: https://www.numpy.org Documentation: https://numpy.org/doc Mail

NumPy 22.4k Jan 09, 2023
Cross-media Structured Common Space for Multimedia Event Extraction (ACL2020)

Cross-media Structured Common Space for Multimedia Event Extraction Table of Contents Overview Requirements Data Quickstart Citation Overview The code

Manling Li 49 Nov 21, 2022
This is the second place solution for : UmojaHack Africa 2022: African Snake Antivenom Binding Challenge

UmojaHack-Africa-2022-African-Snake-Antivenom-Binding-Challenge This is the second place solution for : UmojaHack Africa 2022: African Snake Antivenom

Mami Mokhtar 10 Dec 03, 2022
Signals-backend - A suite of card games written in Python

Card game A suite of card games written in the Python language. Features coming

1 Feb 15, 2022
MatryODShka: Real-time 6DoF Video View Synthesis using Multi-Sphere Images

Main repo for ECCV 2020 paper MatryODShka: Real-time 6DoF Video View Synthesis using Multi-Sphere Images. visual.cs.brown.edu/matryodshka

Brown University Visual Computing Group 75 Dec 13, 2022
A medical imaging framework for Pytorch

Welcome to MedicalTorch MedicalTorch is an open-source framework for PyTorch, implementing an extensive set of loaders, pre-processors and datasets fo

Christian S. Perone 799 Jan 03, 2023
Freecodecamp Scientific Computing with Python Certification; Solution for Challenge 2: Time Calculator

Assignment Write a function named add_time that takes in two required parameters and one optional parameter: a start time in the 12-hour clock format

Hellen Namulinda 0 Feb 26, 2022
SAGE: Sensitivity-guided Adaptive Learning Rate for Transformers

SAGE: Sensitivity-guided Adaptive Learning Rate for Transformers This repo contains our codes for the paper "No Parameters Left Behind: Sensitivity Gu

Chen Liang 23 Nov 07, 2022
Multiple-Object Tracking with Transformer

TransTrack: Multiple-Object Tracking with Transformer Introduction TransTrack: Multiple-Object Tracking with Transformer Models Training data Training

Peize Sun 537 Jan 04, 2023
A fast python implementation of Ray Tracing in One Weekend using python and Taichi

ray-tracing-one-weekend-taichi A fast python implementation of Ray Tracing in One Weekend using python and Taichi. Taichi is a simple "Domain specific

157 Dec 26, 2022
Streamlit app demonstrating an image browser for the Udacity self-driving-car dataset with realtime object detection using YOLO.

Streamlit Demo: The Udacity Self-driving Car Image Browser This project demonstrates the Udacity self-driving-car dataset and YOLO object detection in

Streamlit 992 Jan 04, 2023
Python Algorithm Interview Book Review

파이썬 알고리즘 인터뷰 책 리뷰 리뷰 IT 대기업에 들어가고 싶은 목표가 있다. 내가 꿈꿔온 회사에서 일하는 사람들의 모습을 보면 멋있다고 생각이 들고 나의 목표에 대한 열망이 강해지는 것 같다. 미래의 핵심 사업 중 하나인 SW 부분을 이끌고 발전시키는 우리나라의 I

SharkBSJ 1 Dec 14, 2021
Supplemental Code for "ImpressionNet :A Multi view Approach to Predict Socio Facial Impressions"

Supplemental Code for "ImpressionNet :A Multi view Approach to Predict Socio Facial Impressions" Environment requirement This code is based on Python

Rohan Kumar Gupta 1 Dec 19, 2021
Chinese clinical named entity recognition using pre-trained BERT model

Chinese clinical named entity recognition (CNER) using pre-trained BERT model Introduction Code for paper Chinese clinical named entity recognition wi

Xiangyang Li 109 Dec 14, 2022
Contrastive Learning with Non-Semantic Negatives

Contrastive Learning with Non-Semantic Negatives This repository is the official implementation of Robust Contrastive Learning Using Negative Samples

39 Jul 31, 2022
Code repository for the work "Multi-Domain Incremental Learning for Semantic Segmentation", accepted at WACV 2022

Multi-Domain Incremental Learning for Semantic Segmentation This is the Pytorch implementation of our work "Multi-Domain Incremental Learning for Sema

Pgxo20 24 Jan 02, 2023